157.245.171.64

Basic Info

City: Santa Clara

Region: California

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Invalid user ubuntu from 157.245.171.64 port 33134	2019-10-25 03:55:00

Comments on same subnet:

IP	Type	Details	Datetime
157.245.171.141	attack	SSH login attempts.	2020-03-29 14:28:08
157.245.171.141	attackbots	Feb 11 14:27:14 ws26vmsma01 sshd[139713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.171.141 Feb 11 14:27:17 ws26vmsma01 sshd[139713]: Failed password for invalid user bsn from 157.245.171.141 port 51004 ssh2 ...	2020-02-12 02:43:14
157.245.171.141	attackbots	Feb 11 01:02:35 ns382633 sshd\[5740\]: Invalid user qkh from 157.245.171.141 port 34450 Feb 11 01:02:35 ns382633 sshd\[5740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.171.141 Feb 11 01:02:37 ns382633 sshd\[5740\]: Failed password for invalid user qkh from 157.245.171.141 port 34450 ssh2 Feb 11 01:04:00 ns382633 sshd\[5845\]: Invalid user pha from 157.245.171.141 port 48060 Feb 11 01:04:00 ns382633 sshd\[5845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.171.141	2020-02-11 08:06:05
157.245.171.141	attack	Jan 22 18:13:27 MK-Soft-Root2 sshd[21219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.171.141 Jan 22 18:13:30 MK-Soft-Root2 sshd[21219]: Failed password for invalid user user2 from 157.245.171.141 port 46472 ssh2 ...	2020-01-23 15:15:05

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.245.171.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9810
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;157.245.171.64.			IN	A

;; AUTHORITY SECTION:
.			590	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102401 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 25 03:54:56 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 64.171.245.157.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 64.171.245.157.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.76.211.26	attack	Port Scan ...	2020-07-18 04:02:17
180.76.162.19	attackspambots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-07-18 04:15:06
140.246.224.162	attackbotsspam	Invalid user wkz from 140.246.224.162 port 48700	2020-07-18 04:21:45
128.199.203.211	attackspambots	Jul 17 19:58:50 ns392434 sshd[16778]: Invalid user user from 128.199.203.211 port 48238 Jul 17 19:58:50 ns392434 sshd[16778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.203.211 Jul 17 19:58:50 ns392434 sshd[16778]: Invalid user user from 128.199.203.211 port 48238 Jul 17 19:58:52 ns392434 sshd[16778]: Failed password for invalid user user from 128.199.203.211 port 48238 ssh2 Jul 17 20:10:55 ns392434 sshd[17097]: Invalid user wpc from 128.199.203.211 port 43020 Jul 17 20:10:55 ns392434 sshd[17097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.203.211 Jul 17 20:10:55 ns392434 sshd[17097]: Invalid user wpc from 128.199.203.211 port 43020 Jul 17 20:10:57 ns392434 sshd[17097]: Failed password for invalid user wpc from 128.199.203.211 port 43020 ssh2 Jul 17 20:14:52 ns392434 sshd[17158]: Invalid user friend from 128.199.203.211 port 49396	2020-07-18 04:31:57
122.116.189.218	attack	Honeypot attack, port: 81, PTR: 122-116-189-218.HINET-IP.hinet.net.	2020-07-18 04:34:51
134.209.248.200	attackspam	Jul 17 21:33:06 minden010 sshd[20708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.248.200 Jul 17 21:33:08 minden010 sshd[20708]: Failed password for invalid user william from 134.209.248.200 port 38900 ssh2 Jul 17 21:36:52 minden010 sshd[21964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.248.200 ...	2020-07-18 04:13:00
176.43.75.200	attackspam	Automated report (2020-07-17T20:07:29+08:00). Referrer spam originating from this address detected (anti-crisis-seo.com).	2020-07-18 04:31:32
116.90.165.26	attack	Jul 17 21:34:05 vps647732 sshd[15146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.90.165.26 Jul 17 21:34:07 vps647732 sshd[15146]: Failed password for invalid user hash from 116.90.165.26 port 55340 ssh2 ...	2020-07-18 04:13:30
218.92.0.224	attackbotsspam	2020-07-17T22:09:26.440664vps773228.ovh.net sshd[28966]: Failed password for root from 218.92.0.224 port 37927 ssh2 2020-07-17T22:09:29.439703vps773228.ovh.net sshd[28966]: Failed password for root from 218.92.0.224 port 37927 ssh2 2020-07-17T22:09:32.180943vps773228.ovh.net sshd[28966]: Failed password for root from 218.92.0.224 port 37927 ssh2 2020-07-17T22:09:35.833287vps773228.ovh.net sshd[28966]: Failed password for root from 218.92.0.224 port 37927 ssh2 2020-07-17T22:09:38.907130vps773228.ovh.net sshd[28966]: Failed password for root from 218.92.0.224 port 37927 ssh2 ...	2020-07-18 04:23:09
58.226.20.132	attack	TCP (SYN) 58.226.20.132:11631 -> port 23, len 40	2020-07-18 04:07:11
106.13.233.5	attackbotsspam	2020-07-17 09:26:26,241 fail2ban.actions [1042]: NOTICE [sshd] Ban 106.13.233.5	2020-07-18 04:25:29
34.66.19.134	attackspambots	Jul 17 19:38:59 vm1 sshd[6676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.66.19.134 Jul 17 19:39:01 vm1 sshd[6676]: Failed password for invalid user zlw from 34.66.19.134 port 53322 ssh2 ...	2020-07-18 04:24:41
157.100.33.90	attackbots	SSH Brute-Force reported by Fail2Ban	2020-07-18 04:12:49
115.133.51.46	attackbotsspam	DATE:2020-07-17 14:08:08, IP:115.133.51.46, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)	2020-07-18 04:02:03
103.12.160.83	attack	Unauthorized connection attempt from IP address 103.12.160.83	2020-07-18 04:16:02

Recently Reported IPs

86.150.49.252	176.74.156.123	93.189.177.159	31.248.180.160
59.15.71.18	118.116.23.5	47.9.43.52	160.9.206.159
184.173.239.119	61.143.218.184	112.244.194.166	5.28.82.193
173.160.226.46	12.221.129.170	68.247.255.191	70.73.150.161
99.172.187.15	2.54.0.191	177.241.216.4	176.46.74.82